Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

iexplorer problems... HIJackThis Log


  • This topic is locked This topic is locked

#16
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
i thought i did... i didnt get the None of the Above, just start the program button part when i opened hijack this in safe mode

my computer hates me and im computer retaded... the combination is deadly
Thank you for your patience and help
  • 0

Advertisements


#17
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Well, we need to fix those items in safe mode. You want to give it another try???
  • 0

#18
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
as before a little faster now

Ill give it a go!
  • 0

#19
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Logfile of HijackThis v1.99.1
Scan saved at 12:27:48 AM, on 3/20/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Megan A Bonifacino\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://one.drexel.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - (no file)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - (no file)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKCU\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: D-Link AirPlus G Configuration Utility.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....467&clcid=0x409
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
  • 0

#20
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

If you still need assistance with this, please reply to this thread. I don't need to use remote assistance to help you, but I thought it would be easier. :tazz: Let me know.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP